[ianbishop]

It's a query API, no different than any REST API.

[willvarfar]

But how is authentication and authorisation mapped and passed around and shared between the app server cluster and the db cluster?